RFC 9684: A YANG Data Model for Challenge-Response-Based Remote Attestation (CHARRA) Procedures Using Trusted Platform Modules (TPMs)
In plain English — editorial summary, not part of the RFC
This document defines the YANG Remote Procedure Calls (RPCs) and configuration nodes that are required to retrieve attestation evidence about integrity measurements from a device, following the operational context defined in RFC 9683 "TPM-based Network Device Remote Integrity Verification". Complementary measurement logs originating from one or more Roots of Trust for Measurement (RTMs) are also provided by the YANG RPCs. The defined module requires the inclusion of the following in the device components of the composite device on which the YANG server is running: at least one Trusted Platform Module (TPM) of either version 1.2 or 2.0 as well as a corresponding TPM Software Stack (TSS), or an equivalent hardware implementation that includes the protected capabilities as provided by TPMs as well as a corresponding software stack.
Document record
- Document ID
- RFC9684
- Published
- December 2024
- Authors
- H. Birkholz; M. Eckel; S. Bhandari; E. Voit; B. Sulzen; L. Xia; T. Laffey; G. C. Fedorkow
- Status
- PROPOSED STANDARD
- Stream
- IETF
- Area
- sec
- Pages
- 53
- Also known as
- —
Related documents
Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.
- RFC 9683Remote Integrity Verification of Network Devices Containing Trusted Platform ModulesCurrent
December 2024
- RFC 9688Use of the SHA3 One-Way Hash Functions in the Cryptographic Message Syntax (CMS)Current
November 2024
- RFC 9679CBOR Object Signing and Encryption (COSE) Key ThumbprintCurrent
December 2024
- RFC 9690Use of the RSA-KEM Algorithm in the Cryptographic Message Syntax (CMS)Current
February 2025
- RFC 9678Forward Secrecy Extension to the Improved Extensible Authentication Protocol Method for Authentication and Key Agreement (EAP-AKA' FS)Current
March 2025
- RFC 9700Best Current Practice for OAuth 2.0 SecurityCurrent
January 2025
- RFC 9701JSON Web Token (JWT) Response for OAuth Token IntrospectionCurrent
January 2025
- RFC 9662Updates to the Cipher Suites in Secure SyslogCurrent
October 2024
Also filed under
About this page
The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.
Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.
Data sources · Editorial policy · Report a correction · What is an RFC?